Confidentiality Statement

The Health Information Privacy and Accountability Act (HIPAA) privacy rule requires all employees, including medical and other ancillary staff, volunteers, and students—as well as others deemed by the covered entity to be members of its workforce for purposes of compliance with the rule—to receive training consistent with their workplace role and job functions. The workforce should be trained, retrained, and monitored for compliance, and training materials should be updated to reflect changes to the notice of privacy practices.